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Based on review of the provided contract and discussion with Ferguson IT staff, the following are areas 
of concern: 


e The court does not receive or have backup copies of the case management data. 


e The court does not have physical control of the database containing the case management data. 
The case management is hosted off site from the court facility. 


e The court has not requested or received an exemption to Court Operating Rule 1, which states 
“Data processing for courts shall be handled on computer equipment managed and controlled by 
the court.” 


e The contract does not state which vendor staff has access to the case management data. 


e The contract does not state what safeguards are in place to ensure only authorized vendor 
personnel have access to the case management data. 


e The contract does not state the court has ownership of the case management data nor does it state 
permitted use by the vendor of the case management data. 


e The court case management systems contract is with the Ferguson Police Department. 


